Free 156-215.81.20 Sample Questions — Check Point Certified Security Administrator – R81.20 (CCSA)

Gaia has two default user accounts that cannot be deleted. What are those user accounts?

• A. Expert and Clish
• B. Control and Monitor
• C. Admin and Monitor
• D. Admin and Default

Fill in the blanks: A Check Point software license consists of a _____ and _____.

• A. Software container; software package
• B. Software package; signature
• C. Signature; software blade
• D. Software blade; software container

When an Admin logs into SmartConsole and sees a lock icon on a gateway object and cannot edit that object, what does that indicate?

• A. Incorrect routing to reach the gateway
• B. The Admin would need to login to Read-Only mode
• C. The gateway is not powered on
• D. Another Admin has made an edit to that object and has yet to publish the change

Which Check Point software blade monitors Check Point devices and provides a picture of network and security performance?

• A. Logging and Status
• B. Monitoring
• C. Threat Emulation
• D. Application Control

What are the two deployment options available for a security gateway?

• A. Bridge and Switch
• B. Local and Remote
• C. Cloud and Router
• D. Standalone and Distributed

Which of the following is NOT an alert option?

• A. SNMP
• B. User defined alert
• C. High alert
• D. Mail

What is required for a site-to-site VPN tunnel that does not use certificates?

• A. Unique Passwords
• B. Pre-Shared Secret
• C. SecureID
• D. RSA Token

What are the software components used by Autonomous Threat Prevention Profiles in R81.20 and higher?

• A. Sandbox, ThreatCloud, Zero Phishing, Sanitization, C&C Protection, IPS, File and URL Reputation
• B. IPS, Threat Emulation and Threat Extraction
• C. Sandbox, ThreatCloud, Sanitization, C&C Protection, IPS
• D. IPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction

What command from the CLI would be used to view current licensing?

• A. cplic print
• B. show license -s
• C. fw ctl tab -t license -s
• D. license view

You have enabled “Extended Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

• A. Log Trimming is enabled
• B. Content Awareness is not enabled
• C. Logging has disk space issues
• D. Identity Awareness is not enabled

Where can the administrator edit a list of trusted SmartConsole clients?

• A. Using cpconfig on any Gateway or Server, in the GAiA Portal logged into a Security Management Server
• B. Only using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients
• C. In the GAiA Portal logged into a Security Management Server, using SmartDashboard: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients, via cpconfig on a Security Gateway
• D. Using cpconfig on a Security Management Server, in the GAiA Portal logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators >Trusted Clients

By default, which port is used to connect to the GAiA Portal?

• A. 4434
• B. 80
• C. 8080
• D. 443

How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

• A. Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection
• B. Involved traffic logs will be forwarded to a log server
• C. Provides additional information to the connected user
• D. Provides log details view email to the Administrator

You had setup the VPN Community ‘VPN-Stores' with 3 gateways. There are some issues with one remote gateway(1.1.1.1) and an your local gateway. What will be the best log filter to see only the IKE Phase 2 agreed networks for both gateways.

• A. action:"Key Install" AND 1.1.1.1 AND Quick Mode
• B. Blade:"VPN" AND VPN-Stores AND Main Mode
• C. action:"Key Install" AND 1.1.1.1 AND Main Mode
• D. Blade:"VPN" AND VPN-Stores AND Quick Mode

What is the default shell for the Gaia command line interface?

• A. Admin
• B. Clish
• C. Expert
• D. Bash

What is a role of Publishing?

• A. The Publish operation sends the modifications made via SmartConsole in the private session and makes them public
• B. The Security Management Server installs the updated session and the entire Rule Base on Security Gateways
• C. The Security Management Server installs the updated policy and the entire database on Security Gateways
• D. Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base

What are the two elements of address translation rules?

• A. Original packet and translated packet
• B. Manipulated packet and original packet
• C. Untranslated packet and manipulated packet
• D. Translated packet and untranslated packet

When should you generate new licenses?

• A. Only when the license is upgraded
• B. After a device upgrade
• C. When the existing license expires, the license is upgraded, or the IP address associated with the license changes
• D. Before installing contract files

Fill in the blanks: The _____ collects logs and sends them to the _____.

• A. Log server; Security Gateway
• B. Security Gateways; log server
• C. Log server; security management server
• D. Security management server; Security Gateway

Fill in the blank: Backup and restores can be accomplished through _____.

• A. CLI, SmartUpdate, or SmartBackup
• B. SmartUpdate, SmartBackup, or SmartConsole
• C. SmartConsole, WebUI, or CLI
• D. WebUI, CLI, or SmartUpdate